cbcvebase.
CVE-2005-0946
published 2005-03-29

CVE-2005-0946: SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the…

PriorityP434high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.20%
64.3th percentile
SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page.

Affected

3 ranges
VendorProductVersion rangeFixed in
coinsoft_technologiesphpcoin——
coinsoft_technologiesphpcoin——
coinsoft_technologiesphpcoin——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.